Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
File:                     RruCFbImbaPA9spVzHuoAOmt4qI.mft (raw, json)
Hash identifier:          /dv8xUI3+4g/w9iXO1j9+I6szaKQNeft3fRuHpOwP+I=
Subject key identifier:   9C:E4:29:0C:8F:E9:EE:0F:F7:24:EB:42:57:8C:EC:59:F0:E4:CA:F4
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Certificate issuer:       /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial:       0197B6A1AC179ECACD3C77F24511B5359097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
Manifest number:          15BE
Signing time:             Sat 28 Jun 2025 13:02:18 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:18 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:18 +0000
Files and hashes:         1: 9L0Co8CEy186G13kaYMinlb5Afg.roa (hash: 6p7nu1hIgCVQFvaFdpUf1fbcZ1K03G9ItG/q4By8N9A=)
                          2: E0Vqea0aWvL8BvXZCixWW4x1Xf8.roa (hash: YbPt+4+0edt07crfTPCARczh/UjImehgu5s1r3RYYLE=)
                          3: RruCFbImbaPA9spVzHuoAOmt4qI.crl (hash: 3zZhdjQ9KR1kiyriDDAcVZVtGVjkCYGSxOLjkxpSKgQ=)
                          4: o4qJydU8QHB9yf5elCeoJvNBmoA.roa (hash: 2K8rsjnSWXQjx0NDAMp9U5sFUQZR7E/jK97Yg8CSOow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:ac:17:9e:ca:cd:3c:77:f2:45:11:b5:35:90:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
        Validity
            Not Before: Jun 28 13:02:18 2025 GMT
            Not After : Jun 29 13:02:18 2025 GMT
        Subject: CN=9ce4290c8fe9ee0ff724eb42578cec59f0e4caf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:c2:ac:07:6a:78:85:c7:1f:31:63:f2:df:
                    46:a2:97:07:f5:1e:50:1f:9c:34:95:b1:e0:f9:d2:
                    32:1d:2f:6c:04:4a:ab:f6:f0:3a:fc:e1:f9:88:77:
                    e9:e4:00:86:c3:e4:4d:f7:fa:98:09:e7:68:3d:bb:
                    e6:9b:37:c9:64:2b:6f:b0:10:02:c9:7c:1f:94:8b:
                    c9:27:d4:c5:da:80:4a:55:43:3d:72:0f:3a:1b:13:
                    e3:eb:c0:03:a8:e6:1c:04:ea:db:f0:ab:60:e2:b1:
                    51:0b:5c:8b:ac:a4:41:9b:04:50:49:29:e5:6c:29:
                    08:12:65:d4:64:56:5d:3a:e4:0f:27:e0:5d:a5:3f:
                    7e:69:8d:ba:ac:d7:22:9c:02:ff:0a:b8:52:d7:db:
                    93:0c:14:05:b1:8c:59:e8:26:bd:4c:2d:1d:00:88:
                    4a:55:ca:0f:e3:23:08:0e:dd:94:df:c2:16:56:52:
                    21:06:64:39:a1:c7:09:84:62:2a:3e:30:09:30:e0:
                    a7:c3:d9:90:b1:64:97:b1:f9:77:96:1d:55:bc:d9:
                    17:47:73:22:5b:d6:5d:64:fc:58:f1:65:2f:a3:7f:
                    ec:da:f5:d6:1b:41:fd:8d:80:d1:46:4f:8d:6a:59:
                    71:f7:8f:5a:24:fc:4a:40:6f:61:5b:e1:ed:87:49:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:29:0C:8F:E9:EE:0F:F7:24:EB:42:57:8C:EC:59:F0:E4:CA:F4
            X509v3 Authority Key Identifier:
                keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:1c:23:a7:32:a9:64:18:e0:b5:95:6e:6f:ad:d8:38:e6:8b:
         60:3b:46:9c:ee:11:56:83:6f:ec:8a:ba:61:ac:ae:29:86:59:
         db:bf:c5:e3:6f:31:4d:8b:67:e7:a9:06:46:07:1d:bf:63:5d:
         ad:ef:ac:ae:7e:6b:47:a3:d1:5a:d0:74:e0:c9:41:e3:4c:9f:
         e0:0a:57:49:83:3e:14:44:6a:05:60:e8:62:ed:ca:c6:d2:48:
         e4:7f:3b:56:c3:03:81:70:99:cf:19:53:e5:34:7d:10:05:7c:
         da:85:55:0d:aa:29:8a:26:84:73:bb:4b:b9:f8:0d:85:4e:8d:
         4e:18:8c:47:d6:a3:4d:e8:b9:13:5c:2d:a8:68:af:a1:b7:a5:
         af:68:56:f6:41:ed:85:51:40:a1:df:24:c5:90:16:c5:95:42:
         b0:6f:9e:08:63:26:49:1d:0b:32:bc:d9:72:d8:94:83:51:c4:
         f1:3e:ee:2b:24:a5:27:dc:b1:cc:57:69:bc:6d:27:21:ae:b8:
         b6:8a:87:3a:2b:2a:56:34:72:b8:65:b1:5e:8b:4b:d4:80:ad:
         ee:21:d9:77:13:41:a6:84:44:ad:23:62:61:d9:d3:3f:e2:07:
         26:3d:09:4e:d1:3e:6e:46:00:4a:d8:f8:4f:00:99:2f:ef:46:
         8d:16:a1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:00 2025 by rpki-client